Answered step by step
Verified Expert Solution
Question
1 Approved Answer
Im having a hard time finding the answers to these with the .eve file from the book which is Guide to Computer Forensics and Investigations
Im having a hard time finding the answers to these with the .eve file from the book which is Guide to Computer Forensics and Investigations (5th Edition). Any help would be appreciated.
Completing the Case The files on George's USB drive indicate that he was conducting a side business on his company computer. Now that you have retrieved and analyzed the evidence, you need to find the answers to the following questions to write the final report: How did George's manager acquire the disk? . .Did George perform the work on a laptop, which is his own property? If so, did he conduct business transactions on his break or during his lunch hour? At what times of the day was George using the non-work-related files? How did you retrieve this information? . . Which company policies apply? Se... File Name File Size Attribu... Deleted Created Date Modified Date Accessed Date 12/31/1969 19:00 12/09/2005 06:59 12/09/2005 06:59 12/09/2005 06:59 12/09/2005 06:59 12/09/2005 06:59 12/09/2005 06:59 All Files Client Info Bling Letter NO mdb doc txt xls txt doc 104,448 bytes a --... 24,064 bytes a - - 227 bytes a 13,824 bytes a - 12/31/1969 19:00 12/31/1969 19:00 12/09/2005 06:53 12/09/2005 00:00 12/09/2005 06:50 12/09/2005 00:00 12/09/2005 06:52 12/09/2005 00:00 12/09/2005 06:52 12/09/2005 00:00 12/09/2005 06:5112/09/2005 00:00 12/09/2005 06:5012/09/2005 00:00 .NO YES YES NO YES YES confirmation Income letter1 Regrets 121 bytes 23,552 bytes a - Completing the Case The files on George's USB drive indicate that he was conducting a side business on his company computer. Now that you have retrieved and analyzed the evidence, you need to find the answers to the following questions to write the final report: How did George's manager acquire the disk? . .Did George perform the work on a laptop, which is his own property? If so, did he conduct business transactions on his break or during his lunch hour? At what times of the day was George using the non-work-related files? How did you retrieve this information? . . Which company policies apply? Se... File Name File Size Attribu... Deleted Created Date Modified Date Accessed Date 12/31/1969 19:00 12/09/2005 06:59 12/09/2005 06:59 12/09/2005 06:59 12/09/2005 06:59 12/09/2005 06:59 12/09/2005 06:59 All Files Client Info Bling Letter NO mdb doc txt xls txt doc 104,448 bytes a --... 24,064 bytes a - - 227 bytes a 13,824 bytes a - 12/31/1969 19:00 12/31/1969 19:00 12/09/2005 06:53 12/09/2005 00:00 12/09/2005 06:50 12/09/2005 00:00 12/09/2005 06:52 12/09/2005 00:00 12/09/2005 06:52 12/09/2005 00:00 12/09/2005 06:5112/09/2005 00:00 12/09/2005 06:5012/09/2005 00:00 .NO YES YES NO YES YES confirmation Income letter1 Regrets 121 bytes 23,552 bytes aStep by Step Solution
There are 3 Steps involved in it
Step: 1
Get Instant Access to Expert-Tailored Solutions
See step-by-step solutions with expert insights and AI powered tools for academic success
Step: 2
Step: 3
Ace Your Homework with AI
Get the answers you need in no time with our AI-driven, step-by-step assistance
Get Started